This must be an inside job. Had to have disabled MFA for this - virtually not way to get by this unless you also get phone or email access which for Obama or Gates would be nearly impossible.
I have a friend who works in local government. I forget if they said they can disable 2FA, but they can go around it other ways in his agency (temporary PINs, for example).
This must be an inside job. Had to have disabled MFA for this - virtually not way to get by this unless you also get phone or email access which for Obama or Gates would be nearly impossible.
That may make sense. Though even an admin should not be able to disable MFA on a per account basis.
I have a friend who works in local government. I forget if they said they can disable 2FA, but they can go around it other ways in his agency (temporary PINs, for example).